FreeBSD-SA-26:73.caroot Security Advisory

{
  "id": "f28de2cf918dabe062dc2c8fec6057fc5d740c4810a47385d52bf433a4f9487d",
  "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:73.caroot.asc",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "FreeBSD-SA-26:73.caroot Security Advisory",
    "summary": "FreeBSD updates its trusted certificate bundle to distrust a compromised root certificate. An attacker intercepting network traffic could otherwise impersonate TLS servers. Upgrade to a corrected FreeBSD branch and restart OpenSSL-using daemons or reboot.",
    "evidence": "The corrected bundle marks \"emSign ECC Root CA - G3\" as untrusted.",
    "products": [
      {
        "name": {
          "value": "FreeBSD",
          "evidence": "Affects: All supported versions of FreeBSD."
        },
        "prerequisites": [
          {
            "value": "restart all daemons that use OpenSSL, or reboot the system",
            "evidence": "Upgrade your vulnerable system to a supported FreeBSD stable or release / security branch (releng) dated after the correction date, and restart all daemons that use OpenSSL, or reboot the system."
          }
        ],
        "fixed_versions": [
          {
            "value": "15.1-STABLE",
            "evidence": "Corrected: 2026-10-21 04:42:19 UTC (stable/15, 15.1-STABLE)"
          },
          {
            "value": "15.1-RELEASE-p6",
            "evidence": "2026-10-21 04:44:35 UTC (releng/15.1, 15.1-RELEASE-p6)"
          },
          {
            "value": "14.5-STABLE",
            "evidence": "2026-10-21 04:42:07 UTC (stable/14, 14.5-STABLE)"
          },
          {
            "value": "14.5-RELEASE-p3",
            "evidence": "2026-10-21 04:44:07 UTC (releng/14.5, 14.5-RELEASE-p3)"
          },
          {
            "value": "14.4-RELEASE-p12",
            "evidence": "2026-10-21 04:43:22 UTC (releng/14.4, 14.4-RELEASE-p12)"
          }
        ],
        "affected_versions": [
          {
            "value": "All supported versions of FreeBSD",
            "evidence": "Affects: All supported versions of FreeBSD."
          }
        ]
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-freebsd-security",
  "document_id": 23618,
  "published_at": "2026-10-21T00:00:00+00:00"
}